BitLocker Drive Encryption vs. PK Encryption vs. Symantec Encryption

It is well suited especially for users that access or store sensitive/confidential data on their computers. In the case of where users are accessing confidential data over the network, it is highly recommended to use Bitlocker to encrypt the computer. In the case where users are storing confidential data on their computer, it should be a requirement that BitLocker is used/enabled. It would be less appropriate if someone was using a computer and they were not dealing with any sensitive data, or in cases where the computer is used for recreational purposes (browsing the web, playing games, etc).

Incentivized

I think Symantec Endpoint Protection provides very good protection from all kind of threats. Due to the lean interface, it is sure easy to use. However, set up and start up is time-consuming. It can cause old computers to slow down during start up. Overall, it does perform at the top level as a business-level endpoint protection solution. I feel very safe while working at the office as I've never encountered any issues with this software before. Any kind of spyware or malware is defeated instantly by the help of this up-to-date database.

• Encrypts the entire drive and provides a high level of security.
• In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
• As part of Windows, no additional licensing costs.
• Set up and configuration is relatively easy.
• Uses TPM module to increase security.

Incentivized

• Ease of use for end users. The outlook add in helps with encryption.
• The auto encrypt rules are very intuitive and work every time.
• Encryption strength.

Incentivized

• Even if it's the best we tested, I think write performance could be improved. Maybe with dedicated hardware inside the TPM?
• No integration with OS password is a shame as most others have it and it is Microsoft on Microsoft so they can probably do it better then anyone else and safer.
• I wish they would support multiple passwords like FileVault on macOS. If it's a shared computer, you have to give the only password to Bitlocker to both users.

Incentivized

• The process to set up a user account is a real pain. Symantec requires the user answer a bunch of security questions if they need to reset their password, but no one ever remembers the answers to the questions that they selected.
• Since we use this for remote users who don't always connect to our VPN, when they change their network password it isn't always reflected in Windows and the Symantec Endpoint Encryption (SEE) passwords frequently get out of sync. When the user eventually does connect to the VPN, they do sync and really throw the user for a loop in which passwords to use.
• We found a huge problem with SSDs where an encrypted drive operated twice as slow as a mechanical drive. I believe this was addressed in a later release.

Incentivized

Very easy to enable.

Not good nor bad, BitLocker encryption is a symptom of our era, we need to protect ourselves and our data, BitLocker is a tool, as an IT we have to deal with it but it doesn't bring any benefit to my daily operations.

Incentivized

BitLocker Drive Encryption solution offering is cheaper than the one that McAfee offers, it will help you with specific business concerns like "how many encrypted assets do I have?" it's easy to maintain, easy to deploy, and easy to track. It's best suited for companies that are not trying to go far away on the disk encryption matter

Incentivized

We needed a tool to manage BitLocker and FileVault and this product does both. Also, we needed a product to manage our self-encrypting drives (OPAL drives) and things work great

Incentivized

• The biggest positive impact it has on ROI is the cost savings, since there is no cost to using the software.
• Since it's widely available to anyone with a Windows computer, and the program is built into the operating system, there is no need to really install anything. This helps to save time of the IT department having to do installs, and also keep track of licensing, etc.

Incentivized

• Keeps our company compliant with HIPPA and other requirements that our customers have.
• Does not affect user's day to day work.
• Increased security for mobile employees.